[-] nfultz@awful.systems 8 points 7 hours ago

todays adexchanger had a lolworthy note that the binance hack began with a search ad.

If you hadn’t heard, Binance was totally pwned in a $6 billion crypto heist last week, suspected to be a North Korean operation. Well, Binance has now published what amounts to a preliminary autopsy report of the incident.

The heist began when a Binance Wallet DevOps team member accidentally downloaded a malicious copy of Homebrew – a popular open-source tool – from a mirror site promoted in a search ad. The malware was spotted, but not before the hackers had obtained the real identities of Wallet DevOps team members.

Using those identities, the North Korean hacking unit spent months targeting Binance’s wallet team with covert schemes. One involved a prolonged fake job interview that lured a Binance DevOps engineer into downloading an “assignment” onto their work device.

After taking control of the Binance DevOps engineer’s laptop, the hacker used an unnamed internal AI tool to log in to the devices of other engineers. Access to multiple credentials allowed the heist to go through.

Binance guy fell for "top link is ads". COME ON.

Never understood why my employer would drop $30m on Crowdstrike but not add uBlock Origin to their company chrome profile for free.

[-] nfultz@awful.systems 4 points 4 days ago

going down a little rabbit hole. on zerohedge they noted:

Benjamin Mann, another Anthropic cofounder who was not listed on the S-1 for reasons unknown, published an essay in 2019 titled "Why I now identify as an Effective Altruist."

=> https://sfstandard.com/2026/10/26/anthropic-cofounder-mystery-ben-mann/

=> https://www.reddit.com/r/Anthropic/comments/1nznl4z/who_is_ben_mann_to_anthropic/

=> https://www.courtlistener.com/docket/67538258/tremblay-v-openai-inc/?page=3

=> https://www.courtlistener.com/docket/67538258/273/1/tremblay-v-openai-inc/

So in his court declaration (and on linkedin) he says co-founded Anthropic. And also that he was the Data Eng at OpenAI that "undertook" the second batch of pirated books into GPT-3.

Any speculation on what the redacted line was? And would this or other litigation be a factor to leave him off the S1; ie it could potentially expose / risk the 50.1% voting Class F LLC shares through Mann? Or maybe he already pledged all his shares to open giving.

[-] nfultz@awful.systems 13 points 6 days ago

https://www.todayintabs.com/p/eternal-black-october

The problem with A.I. defense is the same asymmetry attackers have always had against defenders. After a hotel bombing in Brighton, England in October, 1984 that failed to kill Margaret Thatcher, the Irish Republican Army put out a statement that said “Today, we were unlucky. But remember we have only to be lucky once. You will have to be lucky always.“ As it turned out, Margaret Thatcher was lucky always, but there’s no reason to believe the rest of us will be. If an A.I. hack attempt works one time out of a thousand, that’s a fantastic success rate. If your A.I. sysop “secures” your server by deleting the production database and all the backups one time out of a thousand… well. Who’s gonna be first to sign up for those odds? Roll the dice! Apparently they always come up four.

[-] nfultz@awful.systems 16 points 2 months ago

Hadn't seen this discussed previously and/or I missed it, but I guess this is one way they'll juice metrics for their IPO.

yolo mode for all will certainly get that avg token burn up.

https://ehandbook.com/its-official-ai-coding-no-longer-needs-your-stupid-human-meatbag-input-32e04269319e?sk=586c08fd0f31c7c75dd107c3dfb77dcf

Anthropic announced earlier in the week that they were going to set the default mode on Claude Code to auto, that same week, not wasting any time. What that means is, as you build the thing you’re building with Claude Code, instead of stopping at various points (many, many, many points) and asking your permission to do things, it’ll just do them and maybe tell you about them later.

links back to https://techcrunch.com/2026/08/09/anthropic-is-turning-claude-codes-auto-mode-on-by-default/

Anthropic also said that in testing, auto mode proved safer than manual review — in a study with 1,053 paid testers, auto mode caught 89% of harmful actions, while human review only caught 13.6%. (Perhaps that’s because “manual review can become habitual: users approve 97% of permission prompts in Claude Code.”)

Which links back to https://claude.com/blog/auto-mode-default-in-claude-code

Auto mode is designed to balance users’ desire not to be interrupted with a system that helps avoid harmful actions: instead of prompts, it routes each tool call through a classifier targeted at blocking actions that are irreversible, destructive, or aimed outside your environment. When the classifier blocks something, Claude usually finds a safer way to proceed on its own or asks you directly for the go-ahead; if it can't make progress—three blocks in a row, or twenty across a session—Claude Code falls back to manual approvals.

Fucking just use the classifier with manual mode then instead of flooding people in cursed skinner loops with garbage permission popups. This isn't anything special to yolo or anthropic. It's like all the tech industry learned from Windows Vista or the EU cookie law was the dark patterns.

[-] nfultz@awful.systems 19 points 4 months ago

https://www.fastcompany.com/91562297/daters-say-ai-dependence-gives-them-the-ick h/t naked capitalism

Younger daters are especially likely to view AI reliance as a red flag. While 56% of Millennial respondents said they wouldn’t date someone who uses AI regularly, that figure rose to 64% among Gen Z.

More than half of Gen Z daters surveyed said they’d consider it a dealbreaker if someone used AI for career advice or spending decisions, compared with 46% and 44% of Millennials, respectively.

? the kids are alright ?

[-] nfultz@awful.systems 19 points 4 months ago

https://www.linkedin.com/posts/coquinn_saw-a-guy-watering-his-lawn-this-morning-share-7469886051847766016-rhHD/

Saw a guy watering his lawn this morning. Just standing there, hose in hand, dumping potable water onto grass that exists for no reason other than to be looked at and complained about.

Sir. Do you understand that a single hyperscale data center can drink millions of gallons a year keeping GPUs from cooking themselves while they generate a poem about a sad robot? That water has a HIGHER calling. That water could be evaporating off a cooling tower in service of someone’s RAG pipeline that returns the wrong answer with tremendous confidence.

And here you are. Hydrating Kentucky bluegrass. In a region where the grass was never supposed to grow in the first place.

I asked him if his lawn had an SLA. He said no. I asked what his lawn’s uptime commitment was. He looked at me like I was the unreasonable one. Meanwhile that turf is sitting at four nines of being green and producing exactly zero tokens per second.

We are pouring concrete across three states to host inference workloads, and this man is allocating municipal water to a crabgrass cluster with no monetization strategy. No usage-based billing. Not even a freemium tier.

Anyway I reported him to nobody, because there’s no one to report him to, which is honestly the most damning part of this entire ecosystem.

Touch grass, they said. He did. Look where it got us.

NOT EVEN A FREEMIUM TIER. that got me.

[-] nfultz@awful.systems 19 points 5 months ago

https://stackoverflow.com/questions/79948695/how-can-i-avoid-using-llms-as-a-software-developer

For me, the ideal usage case for LLMs are not prompts like "write this app" or "write this functionality" which indeed will often wreck havoc, but instead write simple functions. Sure, I can implement a matrix multiplication algorithm or search for optimised versions of it, but so can the LLM in a matter of seconds.

Please, just fucking don't, BLAS and sparse pack and the netlib exists for a reason. Matrix multiply only sounds simple to you because you don't actually care that much. The last thing anyone wants or needs is to start a new job and have to debug your awful regurgitated Numerical Recipes In C, incorrectly ported to python, AT SCALE.

[-] nfultz@awful.systems 16 points 8 months ago

From fellow traveler stats consultant John Mount:

https://johnmount.github.io/mzlabs/JMWriting/WeAreCookedLLMs.html

Somehow he manages to touch on so many different subplots, a shotgun sneer instead of snipe

if “tech-bro” plus a LLM is a “100x engineer”, then “bro” isn’t needed for much longer as the LLM alone must be a “99x engineer.” However, I don’t think “bro plus” is often really a 100x engineer, and the LLM alone isn’t a 99x engineer. However, “bro plus” may outlast their peers who make the mistake of trying to do the actual work in place of talking LLMs up.

The above may or may not be the case. But if it is, then it is the LLM-bros (which include non-technologists, con artists, financiers, men and women) that are destroying everything - not the LLMs.

The problem with this iteration is the full court press of finance and technology. The major players are using financing to dump results at a price way below production costs. This isn't charity, it is to demoralize and kill competition.

claiming "after we take over the world we will consider adding Universal Basic Income (UBI)". The LLM bros already have a lot of the money, and they are not even rehearsing diverting it into basic income now. Why does one believe they would do that when they also have all of the power?

You don't have to hand it to Altman, but he did fund the largest UBI experiment through Open Research with his il gotten gains. OTOH, one interpretation of that data was that UBI "decreases the labor supply" which was then used directly as an argument against it.

Any worry about scope or power of LLMs is fed back as an alignment threat so dire that only the current LLM leaders should be allowed to continue work (inviting regulatory capture). Any claim the LLMs don't work is fed back as "you are prompting it wrong"

Orbital deployment makes all of radiation tolerance, connectivity, power, maintenance, and heat dissipation much harder and much more expensive. We are still at a time where putting an oven or air-frier in space is considered noteworthy (China 2025, NASA 2019 ref).

air friers IN SPACE ha

I am more worried about the LLM-bros and their auto-catalytic money doomsday machine than about the LLMs themselves.

100% - ACMDM is a nice turn of phrase as well.

[-] nfultz@awful.systems 27 points 8 months ago

https://futurism.com/artificial-intelligence/rentahuman-musk-ai h/t naked capitalism

Liteplo is the genius behind RentAHuman, an online marketplace where humans can lease out their bodies to autonomous AI agents.

gah

Last week, Wired writer Reece Rogers offered his body up to the platform, finding that most of the jobs offered were scams to promote other AI startups.

lmao of course they were

[-] nfultz@awful.systems 18 points 8 months ago

How AI slop is causing a crisis in computer science | Nature h/t naked capitalism

One reason for the boom is that LLM adoption has increased researcher productivity, by as much as 89.3%, according to research published in Science in December.

Let's not call it "productivity" - to quote Bergstrom, twice as many papers is not the same as twice as much science.

[-] nfultz@awful.systems 18 points 10 months ago

I did it, I went and made a Official Public Comment IRL:

In UCLA's Strategic Plan, Goal 1 is to "Deepen our engagement with Los Angeles" and Goal 5 is to "Become a more effective institution". By engaging with Los Angeles businesses, UCLA can get both better terms, prices, and services, and support the local economy. Buy Local, Spend Local.

The federal government encourages this with Small Business Innovation Research and Small Business Technology Transfer grants, among other things. Furthermore, the State of California requires a portion of its spending go toward certified Small Businesses.

And yet, the University apparently awarded a contract reportedly worth hundreds of thousands to millions of dollars to OpenAI. I have not found any documentation of an open Request for Proposals or competitive process for that award.

My question is:

If there was an RFP, where was it publicly posted, and if there was no RFP, why not, and were Los Angeles vendors or small businesses evaluated as alternatives, as recommended by UC policy and state law?

Given the scale of this spending and the context of a budget crisis, transparency, compliance, and small-business participation are critical to our effectiveness and engagement.

I’m asking for clarity on how this decision was made, how it aligns with procurement guidelines and University goals, and how DTS plans to ensure that local and small businesses are meaningfully included moving forward.

Thank you.

28
[-] nfultz@awful.systems 16 points 1 year ago

They put 'environmental impact of AI' on the front of the student newspaper (below the fold, but still), then you flip and see this

kinda feeling two steps forward, three steps back rn on top of all the other drama on campus

21

Another response to Ptacek.

22
18
32
view more: next ›

nfultz

0 post score
0 comment score
joined 3 years ago